From f35df2c9feece209f17eed34fb20b2af8d465c6d Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Thu, 1 Feb 2024 11:01:58 -0800
Subject: [PATCH] [threat-actors] Add Sunglow Blizzard

---
 clusters/threat-actor.json | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 20ac754..5b9fdcd 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -14308,6 +14308,21 @@
       },
       "uuid": "209b1452-7062-46f8-9037-3be5f7eda54f",
       "value": "Velvet Tempest"
+    },
+    {
+      "description": "DEV-0665 is a threat actor associated with the HermeticWiper attacks. Their objective is to disrupt, degrade, and destroy specific resources within a targeted country.",
+      "meta": {
+        "country": "RU",
+        "refs": [
+          "https://twitter.com/ESETresearch/status/1503436420886712321",
+          "https://thehackernews.com/2022/03/second-new-isaacwiper-data-wiper.html"
+        ],
+        "synonyms": [
+          "DEV-0665"
+        ]
+      },
+      "uuid": "9c0f0db1-b773-42ff-a6f7-d4b6c1d28ca4",
+      "value": "Sunglow Blizzard"
     }
   ],
   "version": 298